$ rpki-client -vvf rpki.apnic.net/member_repository/A916148F/68848268074111EDAB19D447C4F9AE02/5Qhzr0de1u63y5Y8ZejZgFuLtWk.mft File: 5Qhzr0de1u63y5Y8ZejZgFuLtWk.mft (raw, json) Hash identifier: PgG4UmvJ2K+1o/8bSzuG8mOnrgvyyhA+s7OG36TQPn4= Subject key identifier: 96:0B:04:B9:4B:C1:29:D3:23:9A:04:B3:EF:41:22:F0:98:DF:23:02 Authority key identifier: E5:08:73:AF:47:5E:D6:EE:B7:CB:96:3C:65:E8:D9:80:5B:8B:B5:69 Certificate issuer: /CN=A916148F/serialNumber=E50873AF475ED6EEB7CB963C65E8D9805B8BB569 Certificate serial: 0284 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Qhzr0de1u63y5Y8ZejZgFuLtWk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916148F/68848268074111EDAB19D447C4F9AE02/5Qhzr0de1u63y5Y8ZejZgFuLtWk.mft Manifest number: 0280 Signing time: Tue 13 May 2025 01:26:11 +0000 Manifest this update: Tue 13 May 2025 01:26:10 +0000 Manifest next update: Tue 20 May 2025 01:26:10 +0000 Files and hashes: 1: 5Qhzr0de1u63y5Y8ZejZgFuLtWk.crl (hash: /pwYJfzyyKYz+uTndBl7bIdJfJsVS5nPq+PmNr/sPsU=) 2: E757164C074511EDB229157DC4F9AE02.roa (hash: onRdgGkpkgbRrilTwhd//fNz2yNBz6ru8beWXJE4ohY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916148F/68848268074111EDAB19D447C4F9AE02/5Qhzr0de1u63y5Y8ZejZgFuLtWk.crl rsync://rpki.apnic.net/member_repository/A916148F/68848268074111EDAB19D447C4F9AE02/5Qhzr0de1u63y5Y8ZejZgFuLtWk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Qhzr0de1u63y5Y8ZejZgFuLtWk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 01:26:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 644 (0x284) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916148F, serialNumber=E50873AF475ED6EEB7CB963C65E8D9805B8BB569 Validity Not Before: May 13 01:26:10 2025 GMT Not After : May 20 01:26:10 2025 GMT Subject: CN=68229fb3-020f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:52:5a:c7:5a:69:98:d8:94:6a:cb:74:c1:cf: 7b:ca:08:38:8d:46:00:77:f6:41:df:bc:e8:bb:3c: 50:05:f2:8a:93:f2:bc:d9:1d:a3:e9:77:0e:72:41: a4:76:66:63:b2:96:39:8b:2d:be:93:74:6d:9e:49: 1d:e7:e0:43:0b:af:94:ea:d8:cc:02:be:d2:2f:10: 49:96:89:99:58:26:e4:3b:69:6f:77:40:de:78:f3: b8:8c:e6:ae:b5:8f:c4:82:df:20:bf:fe:62:e1:73: 5a:51:d3:91:c7:70:d4:71:0d:5e:1e:d1:c3:2f:64: 6f:5f:f0:29:4c:e9:db:1d:d4:d9:c3:cf:1b:67:9d: 11:0e:f4:76:62:08:bc:d7:01:45:ae:cd:fa:51:76: 90:e4:0b:a8:5a:04:37:4c:ea:44:3e:03:a5:d4:a1: 0b:f6:4e:7e:fa:d4:85:d2:fd:3f:af:6b:02:03:55: 67:25:a8:93:ac:f9:ea:b1:ba:36:95:46:e0:68:cd: c4:c3:d5:71:d0:6d:55:79:2c:ed:d4:4d:3e:19:52: db:e0:39:2f:24:6e:12:95:30:49:84:17:37:45:c6: 48:3f:be:bd:49:0e:a2:bd:51:b7:c1:1f:a7:e0:d8: 46:bc:4d:0e:7a:09:7d:36:fa:74:43:ff:48:1b:83: dd:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:0B:04:B9:4B:C1:29:D3:23:9A:04:B3:EF:41:22:F0:98:DF:23:02 X509v3 Authority Key Identifier: keyid:E5:08:73:AF:47:5E:D6:EE:B7:CB:96:3C:65:E8:D9:80:5B:8B:B5:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916148F/68848268074111EDAB19D447C4F9AE02/5Qhzr0de1u63y5Y8ZejZgFuLtWk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Qhzr0de1u63y5Y8ZejZgFuLtWk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916148F/68848268074111EDAB19D447C4F9AE02/5Qhzr0de1u63y5Y8ZejZgFuLtWk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5b:f5:78:4f:05:e7:6b:47:c3:f3:db:e5:8b:0f:4d:a8:e5:44: 12:4f:8b:b3:05:ed:fd:1e:f0:8d:3e:35:b6:15:08:62:43:86: dc:cd:b3:9d:e3:2d:7e:bb:0a:44:4a:16:e4:86:54:64:5e:f0: 74:b1:6e:da:7c:5f:46:a1:39:bb:a1:e3:04:f9:5b:1d:2e:ca: 8b:66:aa:61:86:49:66:f3:1d:ce:0d:1b:93:89:a4:7a:7d:1e: 9a:b6:a9:85:92:03:42:ec:d0:0a:78:be:1e:94:cf:76:00:22: 41:47:bd:48:b4:42:87:52:22:ca:35:02:8b:8a:ce:02:1e:ca: 3e:50:ef:45:5d:2a:df:88:b5:39:57:35:af:64:9c:b2:6a:c4: 4e:e0:53:1a:ff:5c:a1:47:c3:ff:c3:54:55:48:90:2d:94:4a: 6a:0b:01:b3:83:6f:5e:9a:fc:b1:69:a3:6b:8e:0f:e7:0f:a9: 09:bb:fe:2f:1d:55:1b:d6:1a:52:a5:e9:79:5e:f0:39:a1:ba: 73:f8:6c:45:d6:dd:df:9c:60:35:a9:88:c2:ed:49:c6:e6:ef: 3f:1a:6b:a7:b8:45:38:10:8a:6c:5c:6f:f9:6f:77:b3:3b:c9: 6f:3b:0a:31:f9:15:e8:da:e4:1b:66:9a:d8:d4:9f:75:a7:ce: 0a:8f:e3:24 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAoQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjE0OEYxMTAvBgNVBAUTKEU1MDg3M0FGNDc1RUQ2RUVCN0NCOTYzQzY1RThEOTgw NUI4QkI1NjkwHhcNMjUwNTEzMDEyNjEwWhcNMjUwNTIwMDEyNjEwWjAYMRYwFAYD VQQDEw02ODIyOWZiMy0wMjBmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoVJax1ppmNiUast0wc97ygg4jUYAd/ZB37zouzxQBfKKk/K82R2j6XcOckGk dmZjspY5iy2+k3Rtnkkd5+BDC6+U6tjMAr7SLxBJlomZWCbkO2lvd0DeePO4jOau tY/Egt8gv/5i4XNaUdORx3DUcQ1eHtHDL2RvX/ApTOnbHdTZw88bZ50RDvR2Ygi8 1wFFrs36UXaQ5AuoWgQ3TOpEPgOl1KEL9k5++tSF0v0/r2sCA1VnJaiTrPnqsbo2 lUbgaM3Ew9Vx0G1VeSzt1E0+GVLb4DkvJG4SlTBJhBc3RcZIP769SQ6ivVG3wR+n 4NhGvE0Oegl9Nvp0Q/9IG4PdbwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJYLBLlL wSnTI5oEs+9BIvCY3yMCMB8GA1UdIwQYMBaAFOUIc69HXtbut8uWPGXo2YBbi7Vp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MTQ4Ri82ODg0ODI2ODA3 NDExMUVEQUIxOUQ0NDdDNEY5QUUwMi81UWh6cjBkZTF1NjN5NVk4WmVqWmdGdUx0 V2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVRaHpyMGRlMXU2M3k1WThaZWpaZ0Z1THRXay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MTQ4Ri82ODg0ODI2ODA3NDExMUVEQUIxOUQ0NDdDNEY5QUUwMi81UWh6cjBkZTF1 NjN5NVk4WmVqWmdGdUx0V2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBb9XhPBedrR8Pz2+WLD02o5UQST4uzBe39HvCNPjW2FQhiQ4bczbOd 4y1+uwpEShbkhlRkXvB0sW7afF9GoTm7oeME+VsdLsqLZqphhklm8x3ODRuTiaR6 fR6atqmFkgNC7NAKeL4elM92ACJBR71ItEKHUiLKNQKLis4CHso+UO9FXSrfiLU5 VzWvZJyyasRO4FMa/1yhR8P/w1RVSJAtlEpqCwGzg29emvyxaaNrjg/nD6kJu/4v HVUb1hpSpel5XvA5obpz+GxF1t3fnGA1qYjC7UnG5u8/GmunuEU4EIpsXG/5b3ez O8lvOwox+RXo2uQbZprY1J91p84Kj+Mk -----END CERTIFICATE-----Generated at Wed May 14 20:46:29 2025 by rpki-client